Rik Lutz

#9311of 60,574
34.5Total CVSS
Vulnerabilities · 4
Medium
1
High
1
Critical
2
PT-2026-2401
2026-01-13
9.8
CVE-2022-50925
Prowise
Prowise Reflect
Prowise Reflect version 1.0.9 has a remote keystroke injection issue. An exposed WebSocket on port 8082 allows attackers to send keyboard events. Malicious web pages can be created to inject keystrokes, enabling attackers to open applications and type arbitrary text by sending specific WebSocket messages.
PT-2022-12195
2022-02-24
6.1
CVE-2021-44662
Xerte
Xerte
A Site Scripting (XSS) issue exists via the `link` parameter in `print.php`.
PT-2022-12196
2022-02-24
9.8
CVE-2021-44663
Xerte
Xerte
A Remote Code Execution (RCE) issue exists via a crafted php file through `elfinder` in `connetor.php`. This allows for potential code execution.
PT-2022-12197
2022-02-24
8.8
CVE-2021-44664
Xerte
Xerte
An Authenticated Remote Code Execution (RCE) issue exists in the website code/php/import/fileupload.php file. This is due to the ability to upload a maliciously crafted PHP file disguised as a language file, which bypasses the upload filters. Attackers can manipulate the file's destination by exploiting path traversal in the `mediapath` variable.